This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/fTF_8zwqGVqS5MslIq-2fWADKb8.roa File: fTF_8zwqGVqS5MslIq-2fWADKb8.roa (raw, json) Hash identifier: LlI44hFKyPdFoWdnamWkRGSv8Iou0mgO68pUv4TrZHM= Subject key identifier: 7D:31:7F:F3:3C:2A:19:5A:92:E4:CB:25:22:AF:B6:7D:60:03:29:BF Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019B0770C770337F644FD930B5540A1DDB79 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/fTF_8zwqGVqS5MslIq-2fWADKb8.roa Signing time: Wed 10 Dec 2025 08:46:30 +0000 ROA not before: Wed 10 Dec 2025 08:46:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216138 IP address blocks: 45.140.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:70:c7:70:33:7f:64:4f:d9:30:b5:54:0a:1d:db:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Dec 10 08:46:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7d317ff33c2a195a92e4cb2522afb67d600329bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:27:2c:cc:c9:c4:b9:03:e6:f5:06:42:34: 5c:dd:c4:d6:1c:94:24:c9:45:1a:21:9c:d3:a0:24: 28:81:d3:3f:75:7d:51:96:32:14:e5:d2:f1:3f:a2: 35:36:f8:b4:8c:45:78:29:ad:b1:83:8d:d9:d4:e7: b1:c8:7a:e7:04:00:6c:04:b5:85:93:5f:6b:88:9e: ff:e6:c3:51:8c:39:06:8d:88:15:91:3e:9e:a1:d9: cc:65:f2:66:f1:23:83:06:08:38:c3:82:f3:b9:aa: b1:6e:a2:96:8d:33:90:35:e6:5d:d5:61:af:fc:1c: bd:86:06:bc:69:81:f3:ef:c7:b5:1f:01:05:06:cb: 8d:8f:68:5b:dc:6c:ca:d1:0d:63:2a:58:09:90:e7: e1:a1:d5:fa:09:4b:fd:ee:36:2c:74:82:04:1d:f2: 3b:b4:61:00:d6:56:84:f6:74:06:78:36:dd:4d:26: fc:1d:6c:53:59:0f:87:5a:46:42:01:ef:b5:93:39: 0b:04:37:93:be:5a:ca:b0:3b:68:6a:c0:96:1b:37: c6:49:9c:7b:82:0a:d0:48:1c:e3:97:ba:25:82:40: 02:e9:d2:8c:fc:b7:84:96:4e:d5:04:29:c1:e0:eb: b5:37:b6:8f:45:da:10:47:97:76:2a:2e:37:d0:08: 1c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:31:7F:F3:3C:2A:19:5A:92:E4:CB:25:22:AF:B6:7D:60:03:29:BF X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/fTF_8zwqGVqS5MslIq-2fWADKb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.210.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:c3:88:02:2d:51:96:3a:72:5d:bc:44:eb:f5:89:23:3f:8b: 40:e6:ce:b9:71:c9:c9:28:fe:5d:d9:8c:c9:ed:50:ba:ce:c0: 0b:c3:cf:7d:a9:6a:dd:bb:06:2a:1f:04:c0:86:1c:fe:a5:f4: 42:1d:2a:b9:6a:59:b9:f3:15:d5:3b:6b:19:fa:be:fd:3a:fe: 4b:07:5b:e8:1e:cd:12:4f:7f:a5:4d:e2:40:0f:94:06:71:5a: 73:e1:fb:10:24:d2:6d:9f:51:86:2f:71:ad:af:d8:12:08:fb: ee:fe:d8:2c:91:d3:7b:db:69:5e:08:92:85:a6:d5:f4:0e:2d: fd:37:43:e3:b4:4f:aa:7e:c1:37:75:ae:1c:4f:de:81:91:95: 3b:d0:74:0d:c0:06:e8:69:35:f8:9b:a3:64:2f:93:f7:0f:6d: 21:dd:09:fe:c3:a2:96:09:28:6f:7b:03:5a:ea:c2:81:9c:aa: 23:dd:40:d4:87:b2:4c:ce:ff:65:fb:4e:2f:09:76:08:bc:f0: df:47:93:e8:29:54:b9:09:7a:16:3f:9d:5e:17:bc:4c:de:d2: 9c:ce:88:d9:29:9c:81:ef:82:b5:8b:d7:3c:00:3a:dc:16:75: 90:e8:70:ad:6d:9b:40:bb:d4:7d:12:d4:f1:eb:20:53:86:ed: 6f:f4:6f:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHcMdwM39kT9kwtVQKHdt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUxMjEwMDg0NjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDMxN2ZmMzNjMmExOTVhOTJlNGNiMjUyMmFmYjY3ZDYwMDMyOWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5cnLMzJxLkD5vUGQjRc3cTWHJQk yUUaIZzToCQogdM/dX1RljIU5dLxP6I1Nvi0jEV4Ka2xg43Z1OexyHrnBABsBLWF k19riJ7/5sNRjDkGjYgVkT6eodnMZfJm8SODBgg4w4LzuaqxbqKWjTOQNeZd1WGv /By9hga8aYHz78e1HwEFBsuNj2hb3GzK0Q1jKlgJkOfhodX6CUv97jYsdIIEHfI7 tGEA1laE9nQGeDbdTSb8HWxTWQ+HWkZCAe+1kzkLBDeTvlrKsDtoasCWGzfGSZx7 ggrQSBzjl7olgkAC6dKM/LeElk7VBCnB4Ou1N7aPRdoQR5d2Ki430AgcbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH0xf/M8KhlakuTLJSKvtn1gAym/MB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEvZlRGXzh6d3FHVnFTNU1zbElxLTJmV0FES2I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYzSMA0G CSqGSIb3DQEBCwUAA4IBAQCLw4gCLVGWOnJdvETr9YkjP4tA5s65ccnJKP5d2YzJ 7VC6zsALw899qWrduwYqHwTAhhz+pfRCHSq5alm58xXVO2sZ+r79Ov5LB1voHs0S T3+lTeJAD5QGcVpz4fsQJNJtn1GGL3Gtr9gSCPvu/tgskdN722leCJKFptX0Di39 N0PjtE+qfsE3da4cT96BkZU70HQNwAboaTX4m6NkL5P3D20h3Qn+w6KWCShvewNa 6sKBnKoj3UDUh7JMzv9l+04vCXYIvPDfR5PoKVS5CXoWP51eF7xM3tKczojZKZyB 74K1i9c8ADrcFnWQ6HCtbZtAu9R9EtTx6yBThu1v9G9v -----END CERTIFICATE-----Generated at Fri Dec 19 19:42:25 2025 by rpki-client